Records held by an Internet Service Provider that may include subscriber details, assigned IP history, connection logs, and billing records. Investigators often need precise timestamps and time zone context to correlate IP activity with a subscriber.